RSA has recently published their 2012 cybercrime trends report. They calculate that every minute, 232 computers are infected by malware, despite on going education and awareness campaigns. Unfortunately the "incompetent and non-malicious" user will always be our weak link.
The report is available here (unfortunately behind a registration firewall).
